| शीर्षक | Tenda M3 V1.0.0.13(4903) Stack-based Buffer Overflow |
|---|
| विवरण | The formexeCommand handler in /bin/httpd is vulnerable to stack overflow due to the complete absence of user input sanitization and bounds checking on parameter cmdinput which can lead to corruption of data on the stack, hijacking of control flow, and DoS. The attack can be performed remotely.
The vulnerability is in the strcpy() call with no bounds checking.
Send a POST request to the /goform/exeCommand endpoint to trigger the buffer overflow |
|---|
| स्रोत | ⚠️ https://github.com/dwBruijn/CVEs/blob/main/Tenda/execCommand.md |
|---|
| उपयोगकर्ता | dwbruijn (UID 93926) |
|---|
| सबमिशन | 28/12/2025 05:52 PM (8 महीनों पहले) |
|---|
| संयम | 29/12/2025 10:17 AM (16 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 338643 [Tenda M3 1.0.0.13(4903) /goform/exeCommand cmdinput बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|